Radiological Terrorism: A Reference Aid on After-Action Reporting for State and Local Incident Management Officials

10 pages

For Official Use Only

April 12, 2012

(U//FOUO) This Reference Aid was jointly produced by DHS and the FBI to assist in the acquisition of detailed information in the aftermath of a successful or attempted radiological terrorism incident that would be of interest to the national law enforcement and emergency response communities. It is intended to help state, local, tribal, and territorial agencies and private sector entities deter, prevent, preempt, or respond to terrorist attacks against the United States.

(U//FOUO) Incident response to a radiological terrorist attack would involve, but not necessarily be limited to, police, fire, hazardous materials, public health, and radiological and nuclear detection emergency management teams and offices. Incident response also would require establishing an incident command system, such as a unified command structure based on the National Incident Management System.

(U//FOUO) This Reference Aid focuses narrowly on those responders who complete after-action reports following incidents described in this Reference Aid. The information collected may provide broader situational awareness after an incident has occurred, support threat analysis of potential follow-on incidents, assist in identifying perpetrators, and facilitate the allocation of consequence-management resources.

(U//FOUO) Warning: Radiological dispersal devices (RDDs) or radiological exposure devices (REDs) may be hazardous, even at a distance. Individuals should not endanger themselves by approaching a dangerously radioactive source or device in an attempt to collect this information. State, local, tribal, territorial, and private sector medical officials will normally be involved in safety evaluations following such incidents.

…

(U) Incident Description and Details

(U//FOUO) For any incident suspected or confirmed of being a malicious attempt to expose or contaminate persons, property, infrastructure, or natural resources with radioactive materials, information of interest includes:

— (U//FOUO) Time and place of the incident—include street address and geographic coordinates, such as latitude and longitude or military grid reference system, if available.

— (U//FOUO) Types of buildings, activities, and infrastructure at the site. Describe what was occurring at the incident site immediately prior to the incident, including any special events taking place. Estimate how many people were present at the start of the incident.

— (U//FOUO) Information about persons fleeing the scene immediately prior to the incident.

— (U//FOUO) Details regarding how radioactive materials were dispersed or intended to be dispersed, to include explosive, manual, or other means of dispersal.

— (U//FOUO) Indications or evidence that other or secondary devices exist.

— (U//FOUO) Evidence of coordination or pre-planning between multiple persons.

— (U//FOUO) Indications or evidence that perpetrators were aware of or tried to circumvent security measures.

— (U//FOUO) Indications or evidence that the perpetrators took measures to confine people in proximity to the radiological device.

— (U//FOUO) Distractions, diversions, or other tactics used to transport or place a device at the incident scene.

— (U//FOUO) Proximity, if known, of the incident site to intense radiation sources, such as those that might be found at hospitals, universities, or industrial sites using radiation devices.

— (U//FOUO) Status of the climate control system, windows, and doors—for incidents that occurred inside a building or vehicle—before and during the incident, to include any evidence of tampering or sabotage.

— (U//FOUO) Proximity of the incident site to critical infrastructure, including potentially symbolic targets or high-population areas.

— (U//FOUO) If the incident involved an attempt to create an RDD or RED by damaging a piece of equipment containing radiological material at its place of installation:

– (U//FOUO) Name, location, and function of the host facility.
– (U//FOUO) Type, purpose, and location of the equipment housing the radiological source within the facility.
– (U//FOUO) Type, quantity, and activity level of the radiological source used in the equipment.
– (U//FOUO) Any information about how the perpetrators might have gained access to the equipment.

— (U//FOUO) If the incident involved an attempt to create an RDD or RED by breaching the packaging and containment measures of radiological material being transported in a vehicle:

– (U//FOUO) Origin, route, and final and intended destination of the vehicle (including all intermediate stops).
– (U//FOUO) Type, quantity, and activity level of the radiological source or sources being transported.
– (U//FOUO) Tactics and tools used by the perpetrators in both the attempt to interdict the shipment or release the radioactive material.
– (U//FOUO) Timeline of events that notes where on the vehicle’s route the radioactive release occurred.

— (U//FOUO) Photos or video of the incident site before, during, and after the incident.

— (U//FOUO) For incidents occurring outdoors, weather conditions leading up to and during the incident—to include any micro-weather conditions peculiar to the incident site, such as unusual wind conditions (or lack thereof) caused by urban canyons, humidity, or whether the incident site was in full sunlight or shade.

— (U//FOUO) Aircraft, model aircraft, or balloons overflying the scene before, during, or after the incident, particularly if the activity was unusual or could be linked to reconnaissance of the incident site or dispersal of radiological materials. Describe the overflight activity and any suspicions it may have raised.

— (U//FOUO) Prior suspicious incidents at the same location, particularly descriptions of possible preoperational activity such as reconnaissance, surveillance, recent theft of radiological materials, or unusual photographing of infrastructure, facilities, or personnel.

Contribute Documents and Information

How to Contribute

Public Intelligence uses the SecureDrop document submission system developed and maintained by the Freedom of the Press Foundation to accept documents and securely communicate with anonymous sources.
For maximum privacy, please consider making your contribution while using a network that is not associated with yourself or your employer.
Download and install the Tor Browser Bundle from the Tor Project website at https://www.torproject.org.
Open the Tor Browser and enter the following URL:

arujlhu2zjjhc3bw.onion

Follow the instructions to contribute documents and information. You will be given a codename consisting of several random words. You can return to the SecureDrop site at a later date and enter this codename to see if we have responded to your submission. You can also respond to our questions or comments and provide more information if necessary.
For your own security, please consider the ramifications of discussing your contribution with anyone else.
For added security and privacy, consider using the Tails operating system to contribute. If you are knowledgeable about security software, consider encrypting your submission with our public PGP key prior to submission.
For more information on how SecureDrop works and how to use it as a source, see the official documentation maintained by the Freedom of the Press Foundation.

Security and Privacy Information

SecureDrop is accessed exclusively through a Tor "hidden service" that is designed to conceal your identity and location from us while allowing for secure connection utilizing end-to-end encryption. SecureDrop does not record your IP address, browser configuration, operating system or and will not utilize persistent cookies to track your activities.
Our SecureDrop servers are operated and maintained under the direct physical control of Public Intelligence.
We will retrieve your contribution and decrypt it on a computer that has never been connected to the internet with no hard drive installed or wireless communications interfaces.
Please remember that while we have made every effort to provide a secure platform for contributing information to this site, we cannot guarantee your privacy or security and make no representations about the service. Ultimately, your security and privacy is your own responsibility.